Abstract:Current and future Internet and distributed systems rely on both centralized client-server model and decentralized peer-to-peer (P2P) model. P2P model is an emerging technology aiming to effectively utilize and manage increasingly large and globally distributed information and computing resources, complementing the available client-server services. In order to truly adopt the P2P model for deploying large-scale Internet applications, and timely merge this model as an indispensable component in the main stream of distributed computing technology, we must address several major technical challenges including the efficiency of overlay networks, cost-effective P2P information search, and privacy and security protection of peers. This dissertation focuses on addressing two critical issues. The first issue is topology mismatch problem between P2P overlay networks and the underlying physical networks in unstructured P2P systems. Addressing topology mismatch problem can fundamentally improve overall search performance of P2P systems. We demonstrate the seriousness of the topology mismatch problem, and define an optimal overlay problem that is proved to be a NP-hard problem. We then develop several effective schemes and algorithms to alleviate the topology mismatch problem. Our proposed algorithms are completely distributed, scalable and effective. Simulation studies show that the total traffic and response time of the queries can be significantly reduced by these schemes without shrinking the search scope. The second issue is overlay distributed denial-of-service (DDoS) attack in P2P systems. Most previous security techniques protect networks from network-layer DDoS attacks, but cannot be applied to overlay DDoS attacks. We propose a distributed and scalable method, DD-POLICE, to detect malicious nodes in order to defend P2P systems from overlay flooding-based DDoS attacks. We show the effectiveness of DD-POLICE by simulation studies and implementation on Gnutella 0.6 protocols. We believe that widely employing these proposed approaches will make P2P systems more scalable and robust.

Distinguishing the Master to Defend DDoS Attack in Peer-to-Peer Networks

Scheduling Peers Based on Credit Construction Period in Peer-to-Peer Networks

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Modeling and Analysis of Resource'S Load-Scale in P2p Network

Defending P2Ps from Overlay Flooding-based DDoS.

Secure P2P Topology Based on a Multidimensional DHT Space Mapping

Overlay Topology Optimization and Security Studies in Peer-to-peer Systems

An Evaluation Algorithm Improving Resilience Against DDoS Attack in Gnutella Peer-to-Peer

Improving Resilience Against DDoS Attack in Unstructured P2P Networks

Cedric: A Collaborative DDoS Defense System Using Credit

Mechanism of Defending P2P from Flooding-Based DDoS Attack

DDoSMiner: an Automated Framework for DDoS Attack Characterization and Vulnerability Mining.

Method Research for Defending Against Distributed Denial-of-Service Attacks Based on Dynamic Game Theory

A pseudonymous credit driven mechanism to mitigate DDoS

A novel rate limit algorithm against meek DDoS attacks

The store-and-flood distributed reflective denial of service attack

Extracting Low-Rate DDoS Attack Characteristics: The Case of Multipath TCP-Based Communication Networks

Towards a Better Understanding of Locality-Awareness in Peer-to-Peer Systems

A Distributed-Log-based IP Traceback Scheme to Defeat DDoS Attacks

Defending against distributed denial-of-service attacks with an auction-based method.

A measurement study of the structured overlay network in P2P file-sharing systems